{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,13]],"date-time":"2026-02-13T15:21:28Z","timestamp":1770996088016,"version":"3.50.1"},"reference-count":56,"publisher":"Association for Computing Machinery (ACM)","issue":"3","funder":[{"name":"Fraunhofer Internal Programs","award":["PREPARE 840 231"],"award-info":[{"award-number":["PREPARE 840 231"]}]},{"name":"NSF grants","award":["CCF-2008905 and CCF-2047682"],"award-info":[{"award-number":["CCF-2008905 and CCF-2047682"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Softw. Eng. Methodol."],"published-print":{"date-parts":[[2026,3,31]]},"abstract":"<jats:p>Greybox fuzzing is used extensively in research and practice. There are umpteen publications that improve greybox fuzzing. However, to what extent do these improvements affect the internal components or internals of a given fuzzer is not yet understood as the improvements are mostly evaluated using code coverage and bug finding capability. Such an evaluation is insufficient to understand the effect of improvements on the fuzzer internals. Some of the literature visualizes the outcomes of fuzzing to enhance the understanding. However, they only focus on high-level information, and no previous research on visualization has been dedicated to understanding fuzzing internals.<\/jats:p>\n                  <jats:p>To close this gap, we propose the first step toward development of a fuzzing-specific visualization framework: a taxonomy of visualization analysis tasks that fuzzing experts desire to help them understand the fuzzing internals. Our approach involves conducting interviews with fuzzing experts and using qualitative data analysis to systematically extract the task taxonomy from the interview data. We also evaluate the support of existing fuzzing visualization tools through the lens of our taxonomy. In our study, we have conducted 33 interviews with fuzzing practitioners and extracted a taxonomy of 120 visualization analysis tasks. Our evaluation shows that the existing fuzzing visualization tools only provide aids to support 10 of them.<\/jats:p>","DOI":"10.1145\/3718346","type":"journal-article","created":{"date-parts":[[2025,5,27]],"date-time":"2025-05-27T12:38:41Z","timestamp":1748349521000},"page":"1-27","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["Visualization Task Taxonomy to Understand the Fuzzing Internals"],"prefix":"10.1145","volume":"35","author":[{"ORCID":"https:\/\/orcid.org\/0009-0003-1963-4265","authenticated-orcid":false,"given":"Sriteja","family":"Kummita","sequence":"first","affiliation":[{"name":"Fraunhofer IEM, Paderborn, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-6650-6239","authenticated-orcid":false,"given":"Miao","family":"Miao","sequence":"additional","affiliation":[{"name":"The University of Texas at Dallas, Richardson, Texas, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3470-3647","authenticated-orcid":false,"given":"Eric","family":"Bodden","sequence":"additional","affiliation":[{"name":"Heinz Nixdorf Institute, Paderborn University and Fraunhofer IEM, Paderborn, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2826-1857","authenticated-orcid":false,"given":"Shiyi","family":"Wei","sequence":"additional","affiliation":[{"name":"The University of Texas at Dallas, Richardson, Texas, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2026,2,13]]},"reference":[{"key":"e_1_3_2_2_2","doi-asserted-by":"publisher","DOI":"10.1109\/TVCG.2013.238"},{"key":"e_1_3_2_3_2","unstructured":"Cornelius Aschermann and Sergej Schumilo. 2025. Ijon UI. Retrieved from https:\/\/github.com\/eqv\/fuzz_ui"},{"key":"e_1_3_2_4_2","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23371"},{"key":"e_1_3_2_5_2","doi-asserted-by":"publisher","DOI":"10.1145\/3551349.3561161"},{"key":"e_1_3_2_6_2","doi-asserted-by":"publisher","DOI":"10.1145\/3708533"},{"key":"e_1_3_2_7_2","doi-asserted-by":"publisher","DOI":"10.1109\/MS.2020.3016773"},{"key":"e_1_3_2_8_2","doi-asserted-by":"publisher","DOI":"10.1145\/3368089.3409748"},{"key":"e_1_3_2_9_2","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978428"},{"key":"e_1_3_2_10_2","doi-asserted-by":"publisher","DOI":"10.1109\/TVCG.2013.124"},{"key":"e_1_3_2_11_2","doi-asserted-by":"publisher","DOI":"10.5555\/3488877.3488887"},{"key":"e_1_3_2_12_2","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560602"},{"key":"e_1_3_2_13_2","doi-asserted-by":"publisher","DOI":"10.1145\/3580596"},{"key":"e_1_3_2_14_2","unstructured":"Andrea Fioraldi and Luigi Paolo Pileggi. 2021. FuzzSplore: Visualizing feedback-driven fuzzing techniques. arXiv:2102.02527. Retrieved from https:\/\/arxiv.org\/abs\/2102.02527"},{"key":"e_1_3_2_15_2","doi-asserted-by":"publisher","DOI":"10.1002\/spe.4380211102"},{"key":"e_1_3_2_16_2","doi-asserted-by":"publisher","DOI":"10.1145\/3363824"},{"key":"e_1_3_2_17_2","doi-asserted-by":"publisher","DOI":"10.1145\/3460319.3464795"},{"key":"e_1_3_2_18_2","doi-asserted-by":"publisher","DOI":"10.1109\/METRICS.2005.24"},{"key":"e_1_3_2_19_2","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833751"},{"key":"e_1_3_2_20_2","unstructured":"Aftab Hussain and Mohammad Amin Alipour. 2021. FMViz: Visualizing tests generated by AFL at the byte-level. arXiv:2112.13207. Retrieved from https:\/\/arxiv.org\/abs\/2112.13207"},{"key":"e_1_3_2_21_2","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243804"},{"key":"e_1_3_2_22_2","doi-asserted-by":"publisher","unstructured":"Sriteja Kummita Miao Miao Eric Bodden and Shiyi Wei. 2025. Artifact for Visualization Task Taxonomy to Understand the Fuzzing Internals. DOI: 10.5281\/zenodo.15459154","DOI":"10.5281\/zenodo.15459154"},{"key":"e_1_3_2_23_2","doi-asserted-by":"publisher","DOI":"10.1145\/1168149.1168168"},{"key":"e_1_3_2_24_2","doi-asserted-by":"publisher","DOI":"10.1145\/3238147.3238176"},{"key":"e_1_3_2_25_2","doi-asserted-by":"publisher","DOI":"10.1186\/s42400-018-0002-y"},{"key":"e_1_3_2_26_2","doi-asserted-by":"publisher","DOI":"10.1109\/TR.2018.2834476"},{"key":"e_1_3_2_27_2","unstructured":"Stephan Lipp Severin Kacianka Alexander Pretschner and Marcel B\u00f6hme. 2024. SAST-Guided Grey-Box Fuzzing. Retrieved from https:\/\/srg.doc.ic.ac.uk\/seminars\/23-11-lipp\/"},{"key":"e_1_3_2_28_2","first-page":"5","article-title":"Fuzz testing process visualization","volume":"39","author":"Lu Han-Lin","year":"2023","unstructured":"Han-Lin Lu, Ren-Jie Zhuang, and Shih-Kun Huang. 2023. Fuzz testing process visualization. Journal of Information Science and Engineering 39 (2023), 5.","journal-title":"Journal of Information Science and Engineering"},{"key":"e_1_3_2_29_2","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2019.2946563"},{"key":"e_1_3_2_30_2","doi-asserted-by":"publisher","DOI":"10.1145\/3377811.3380421"},{"key":"e_1_3_2_31_2","unstructured":"Lucas McDonald Muhammad Ijaz Ul Haq and Ashley Barkworth. 2021. Survey of Software Fuzzing Techniques. Retrieved from https:\/\/www.researchgate.net\/publication\/356980212_Survey_of_Software_Fuzzing_Techniques"},{"key":"e_1_3_2_32_2","doi-asserted-by":"publisher","DOI":"10.1145\/3468264.3473932"},{"key":"e_1_3_2_33_2","volume-title":"Qualitative Data Analysis: An Expanded Sourcebook","author":"Miles Matthew B.","year":"1994","unstructured":"Matthew B. Miles and A. Michael Huberman. 1994. Qualitative Data Analysis: An Expanded Sourcebook. Sage."},{"key":"e_1_3_2_34_2","doi-asserted-by":"publisher","DOI":"10.1109\/TVCG.2009.111"},{"key":"e_1_3_2_35_2","doi-asserted-by":"publisher","DOI":"10.1201\/b17511"},{"key":"e_1_3_2_36_2","doi-asserted-by":"publisher","DOI":"10.1186\/s12859-016-1443-5"},{"key":"e_1_3_2_37_2","unstructured":"OpenSSF. 2025. Fuzz Introspector. Retrieved from https:\/\/github.com\/ossf\/fuzz-introspector"},{"key":"e_1_3_2_38_2","doi-asserted-by":"publisher","DOI":"10.1109\/MSEC.2018.2889892"},{"key":"e_1_3_2_39_2","first-page":"861","volume-title":"Proceedings of the 23rd USENIX Conference on Security Symposium (SEC\u201914)","author":"Rebert Alexandre","year":"2014","unstructured":"Alexandre Rebert, Sang Kil Cha, Thanassis Avgerinos, Jonathan Foote, David Warren, Gustavo Grieco, and David Brumley. 2014. Optimizing seed selection for fuzzing. In Proceedings of the 23rd USENIX Conference on Security Symposium (SEC\u201914). USENIX Association, 861\u2013875."},{"key":"e_1_3_2_40_2","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.1981.234519"},{"key":"e_1_3_2_41_2","doi-asserted-by":"publisher","DOI":"10.1109\/tvcg.2016.2599030"},{"key":"e_1_3_2_42_2","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00137"},{"key":"e_1_3_2_43_2","doi-asserted-by":"publisher","DOI":"10.1109\/TVCG.2013.120"},{"key":"e_1_3_2_44_2","doi-asserted-by":"publisher","DOI":"10.1109\/32.799955"},{"key":"e_1_3_2_45_2","doi-asserted-by":"publisher","DOI":"10.1109\/TVCG.2012.213"},{"key":"e_1_3_2_46_2","first-page":"1","volume-title":"Network and Distributed System Security (NDSS)","author":"Stephens Nick","year":"2016","unstructured":"Nick Stephens, John Grosen, Christopher Salls, Andrew Dutcher, Ruoyu Wang, Jacopo Corbetta, Yan Shoshitaishvili, Christopher Kruegel, and Giovanni Vigna. 2016. Driller: Augmenting fuzzing through selective symbolic execution. In Network and Distributed System Security (NDSS), 1\u201316."},{"key":"e_1_3_2_47_2","doi-asserted-by":"publisher","DOI":"10.1177\/2167696815587648"},{"key":"e_1_3_2_48_2","doi-asserted-by":"publisher","DOI":"10.1145\/1168149.1168169"},{"key":"e_1_3_2_49_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-08147-7_20"},{"key":"e_1_3_2_50_2","doi-asserted-by":"publisher","DOI":"10.1145\/3183440.3183494"},{"key":"e_1_3_2_51_2","doi-asserted-by":"publisher","DOI":"10.1145\/3587158"},{"key":"e_1_3_2_52_2","first-page":"2307","volume-title":"Proceedings of the 29th USENIX Security Symposium (USENIX Security \u201920)","author":"Yue Tai","year":"2020","unstructured":"Tai Yue, Pengfei Wang, Yong Tang, Enze Wang, Bo Yu, Kai Lu, and Xu Zhou. 2020. EcoFuzz: Adaptive energy-saving greybox fuzzing as a variant of the adversarial multi-armed bandit. In Proceedings of the 29th USENIX Security Symposium (USENIX Security \u201920). USENIX Association, 2307\u20132324."},{"key":"e_1_3_2_53_2","unstructured":"Michal Zalewski. 2013. American Fuzzy Lop. Retrieved from https:\/\/github.com\/mirrorer\/afl"},{"key":"e_1_3_2_54_2","unstructured":"Andreas Zeller Rahul Gopinath Marcel B\u00f6hme Gordon Fraser and Christian Holler. 2019. The fuzzing book. Retrieved from https:\/\/www.fuzzingbook.org\/"},{"key":"e_1_3_2_55_2","doi-asserted-by":"publisher","DOI":"10.1007\/s00500-023-09306-2"},{"key":"e_1_3_2_56_2","first-page":"1343","volume-title":"Proceedings of the 32nd USENIX Security Symposium (USENIX Security \u201923)","author":"Zheng Han","year":"2023","unstructured":"Han Zheng, Jiayuan Zhang, Yuhang Huang, Zezhong Ren, He Wang, Chunjie Cao, Yuqing Zhang, Flavio Toffalini, and Mathias Payer. 2023. FISHFUZZ: Catch deeper bugs by throwing larger nets. In Proceedings of the 32nd USENIX Security Symposium (USENIX Security \u201923). USENIX Association, Anaheim, CA, 1343\u20131360."},{"key":"e_1_3_2_57_2","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2019.00106"}],"container-title":["ACM Transactions on Software Engineering and Methodology"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3718346","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,2,13]],"date-time":"2026-02-13T14:36:07Z","timestamp":1770993367000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3718346"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,2,13]]},"references-count":56,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2026,3,31]]}},"alternative-id":["10.1145\/3718346"],"URL":"https:\/\/doi.org\/10.1145\/3718346","relation":{},"ISSN":["1049-331X","1557-7392"],"issn-type":[{"value":"1049-331X","type":"print"},{"value":"1557-7392","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,2,13]]},"assertion":[{"value":"2024-11-17","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2025-05-06","order":2,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2026-02-13","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}